CVE-2026-25624EPSS p16.8%

CVE-2026-25624CVE-2026-25624

arista / ng_firewall

Description

An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processing behavior controls.

Scoring

CVSS 5.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
EPSS0.27% probability of exploitation · percentile 16.8% · 2026-10-05T12:00:23Z
Last modified2026-07-23

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-25623
CVE
CVE-2026-25622
CVE
CVE-2026-25621
CVE
CVE-2026-25620
CVE
CVE-2025-2767
CVE
CVE-2026-0266
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.